dimti
3 years ago
5 changed files with 151 additions and 29 deletions
-
29config/nginx/conf.d/vhosts.conf.example
-
24config/nginx/conf.d/z-grav.conf.example
-
19config/nginx/conf.d/z-s3.conf.example
-
67config/nginx/conf.d/z-wordpress.conf.example
-
41config/nginx/conf.d/z-yii.conf.example
@ -0,0 +1,24 @@ |
|||
server { |
|||
server_name loc.wpstudio-new; |
|||
listen 80; |
|||
root $root; |
|||
index index.html index.htm index.php; |
|||
location / { |
|||
try_files $uri $uri/ /index.php?$query_string; |
|||
} |
|||
location ~ \.php$ { |
|||
fastcgi_pass fpm74; |
|||
include fastcgi_params; |
|||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; |
|||
} |
|||
## Begin - Security |
|||
# deny all direct access for these folders |
|||
location ~* /(\.git|cache|bin|logs|backup|tests)/.*$ { return 403; } |
|||
# deny running scripts inside core system folders |
|||
location ~* /(system|vendor)/.*\.(txt|xml|md|html|yaml|yml|php|pl|py|cgi|twig|sh|bat|example)$ { return 403; } |
|||
# deny running scripts inside user folder |
|||
location ~* /user/.*\.(txt|md|yaml|yml|php|pl|py|cgi|twig|sh|bat)$ { return 403; } |
|||
# deny access to specific files in the root folder |
|||
location ~ /(LICENSE\.txt|composer\.lock|composer\.json|nginx\.conf|web\.config|htaccess\.txt|\.htaccess) { return 403; } |
|||
## End - Security |
|||
} |
@ -0,0 +1,19 @@ |
|||
server { |
|||
server_name s3.local; |
|||
ignore_invalid_headers off; |
|||
client_max_body_size 0; |
|||
proxy_buffering off; |
|||
location / { |
|||
proxy_pass http://minio:9000; |
|||
proxy_set_header Host $host; |
|||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; |
|||
proxy_set_header X-Real-IP $remote_addr; |
|||
proxy_connect_timeout 300; |
|||
# Default is HTTP/1, keepalive is only enabled in HTTP/1.1 |
|||
proxy_http_version 1.1; |
|||
proxy_set_header Connection ""; |
|||
chunked_transfer_encoding off; |
|||
} |
|||
|
|||
listen 80; |
|||
} |
@ -0,0 +1,67 @@ |
|||
server { |
|||
server_name |
|||
wp-with-file-proxy.local.wpstudio.ru |
|||
; |
|||
listen 80; |
|||
root $root; |
|||
index index.html index.htm index.php; |
|||
location / { |
|||
try_files $uri $uri/ /index.php?$args; |
|||
} |
|||
rewrite /wp-admin$ $scheme://$host$uri/ permanent; |
|||
location ~* ^/wp-content/uploads/.*$ { |
|||
expires max; |
|||
proxy_pass $uploads_upstream; |
|||
} |
|||
location ~* ^/uploads/.*$ { |
|||
expires max; |
|||
proxy_pass $uploads_upstream; |
|||
} |
|||
location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ { |
|||
access_log off; |
|||
} |
|||
location ~ [^/]\.php(/|$) { |
|||
fastcgi_split_path_info ^(.+?\.php)(/.*)$; |
|||
if (!-f $document_root$fastcgi_script_name) { |
|||
return 404; |
|||
} |
|||
include fastcgi_params; |
|||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; |
|||
fastcgi_param PATH_INFO $fastcgi_path_info; |
|||
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info; |
|||
|
|||
fastcgi_pass fpm74; |
|||
fastcgi_index index.php; |
|||
fastcgi_read_timeout 3000; |
|||
} |
|||
} |
|||
|
|||
server { |
|||
server_name |
|||
wp.local.wpstudio.ru |
|||
; |
|||
listen 80; |
|||
root $root; |
|||
index index.html index.htm index.php; |
|||
location / { |
|||
try_files $uri $uri/ /index.php?$args; |
|||
} |
|||
rewrite /wp-admin$ $scheme://$host$uri/ permanent; |
|||
location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ { |
|||
access_log off; |
|||
} |
|||
location ~ [^/]\.php(/|$) { |
|||
fastcgi_split_path_info ^(.+?\.php)(/.*)$; |
|||
if (!-f $document_root$fastcgi_script_name) { |
|||
return 404; |
|||
} |
|||
include fastcgi_params; |
|||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; |
|||
fastcgi_param PATH_INFO $fastcgi_path_info; |
|||
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info; |
|||
|
|||
fastcgi_pass fpm74; |
|||
fastcgi_index index.php; |
|||
fastcgi_read_timeout 3000; |
|||
} |
|||
} |
@ -0,0 +1,41 @@ |
|||
server { |
|||
server_name |
|||
yii.local.slave.dimti.ru |
|||
backend.yii.local.slave.dimti.ru |
|||
; |
|||
root $root; |
|||
set $yii_bootstrap "index.php"; |
|||
charset utf-8; |
|||
location / { |
|||
index index.html $yii_bootstrap; |
|||
try_files $uri $uri/ /$yii_bootstrap?$args; |
|||
} |
|||
location ~ ^/(protected|framework|themes/\w+/views) { |
|||
deny all; |
|||
} |
|||
# отключаем обработку запросов фреймворком к несуществующим статичным файлам |
|||
location ~ \.(js|css|png|jpg|gif|swf|ico|pdf|mov|fla|zip|rar)$ { |
|||
try_files $uri =404; |
|||
} |
|||
# передаем PHP-скрипт серверу FastCGI, прослушивающему адрес 127.0.0.1:9000 |
|||
location ~ \.php { |
|||
fastcgi_split_path_info ^(.+\.php)(.*)$; |
|||
# позволяем yii перехватывать запросы к несуществующим PHP-файлам |
|||
set $fsn /$yii_bootstrap; |
|||
if (-f $document_root$fastcgi_script_name){ |
|||
set $fsn $fastcgi_script_name; |
|||
} |
|||
fastcgi_pass fpm74; |
|||
include fastcgi_params; |
|||
fastcgi_param SCRIPT_FILENAME $document_root$fsn; |
|||
# PATH_INFO и PATH_TRANSLATED могут быть опущены, но стандарт RFC 3875 определяет для CGI |
|||
fastcgi_param PATH_INFO $fastcgi_path_info; |
|||
fastcgi_param PATH_TRANSLATED $document_root$fsn; |
|||
} |
|||
# не позволять nginx отдавать файлы, начинающиеся с точки (.htaccess, .svn, .git и прочие) |
|||
location ~ /\. { |
|||
deny all; |
|||
access_log off; |
|||
log_not_found off; |
|||
} |
|||
} |
Write
Preview
Loading…
Cancel
Save
Reference in new issue